A critical vulnerability in Linux’s Epoll feature has been made public, allowing attackers to gain root access on vulnerable systems. The “Bad Epoll” flaw, discovered by Jaeyoung Chung of Seoul National University’s Computer Security Lab, can be exploited using a proof-of-concept (PoC) code released by the researcher. The vulnerability affects Linux distributions based on kernel … Read more
North Korean Hackers Target Open Source Developers in Supply Chain Attacks A sophisticated campaign by North Korean hackers has been targeting open source software developers with a backdoor and an information stealer, compromising repositories on GitHub and other package registries to inject malicious code into popular projects. The operation, dubbed “PolinRider,” is part of a … Read more
A sophisticated hacking campaign, suspected of originating from China, has compromised Indian businesses and individuals by using a fake tax filing utility to deploy the DcRAT malware. The hackers’ tactics exploit a vulnerability in Microsoft’s Windows operating system, leveraging AI-powered threat analysis to evade detection. The attackers created a convincing fake tax filing tool, which … Read more
Cybersecurity teams are increasingly relying on Artificial Intelligence (AI) to identify and address software vulnerabilities, but experts warn that this new approach comes with its own set of challenges. In 2026, the use of AI-powered Security Operations Centers (SOCs) has become more prevalent, but not all platforms are created equal. As organizations explore the benefits … Read more
Security professionals have long been aware of the potential for artificial intelligence (AI) models to discover and exploit software vulnerabilities, but a recent trend highlights just how easily this can be done. Over the past few months, several instances have come to light where AI-powered tools have identified previously unknown vulnerabilities in popular software packages, … Read more
A Massive Malware Campaign Unfolds: SANS ISC Stormcast Highlights the Threat The latest SANS Internet Stormcast has shed light on a significant malware campaign that’s been unfolding in recent days, affecting organizations across various sectors. The malicious activity is attributed to a highly sophisticated strain of malware known as “Emotet,” which has been wreaking havoc … Read more
The cybersecurity industry has been obsessed with finding vulnerabilities for years, but it’s not the discovery itself that’s the problem – it’s what happens next. With the help of AI, organizations are now flooded with more data than ever before, making it impossible to prioritize and act on the most critical issues. For security teams, … Read more
Threat actors are using a cunning technique called prompt injection attacks to trick artificial intelligence (AI) agents into making cryptocurrency payments or trusting fake online platforms. This sophisticated tactic exploits vulnerabilities in how AI systems interact with websites, allowing hackers to manipulate these agents into performing malicious actions. The threat is particularly concerning because it … Read more
The emergence of QuimaRAT, a Java-based malware-as-a-service (MaaS) platform, poses a significant threat to organizations and individuals alike. This versatile threat can run on multiple operating systems, including Windows, Linux, and macOS, making it a formidable tool in the hands of malicious actors. QuimaRAT’s ability to adapt to various environments is rooted in its Java-based … Read more
A new and alarming vulnerability, dubbed TrojPix, has been discovered in air-gapped systems, allowing hackers to extract sensitive data through the electromagnetic emissions of video cables. This exploit is particularly concerning due to its ability to breach supposedly secure environments with minimal technical expertise. The potential for damage is substantial, as it’s estimated that thousands … Read more